Gallery.pm in Apache::Gallery (aka A::G) uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| apache_gallery | apache_gallery | 0.5 |
| apache_gallery | apache_gallery | 0.6 |
| apache_gallery | apache_gallery | 0.5.1 |
| apache_gallery | apache_gallery | 0.4 |
| apache_gallery | apache_gallery | 0.4.1 |